Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2022-48671

cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()

CVSS 5.5 MediumEPSS 0.0018 · 7th percentile

Published by the CVE Program (CNA: Linux) at 3 May 2024, 14:50 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected e446300968c6bd25d9cd6c33b9600780a39b3975 to before 321488cfac7d0eb6d97de467015ff754f85813ff git
  • affected 59c6902a96b4439e07c25ef86a4593bea5481c3b to before 07191f984842d50020789ff14c75da436a7f46a9 git
  • affected dee1e2b18cf5426eed985512ccc6636ec69dbdd6 to before 9f267393b036f1470fb12fb892d59e7ff8aeb58d git
  • affected 3bf4bf54069f9b62a54988e5d085023c17a66c90 to before 5db17805b6ba4c34dab303f49aea3562fc25af75 git
  • affected c0deb027c99c099aa6b831e326bfba802b25e774 to before 99bc25748e394d17f9e8b10cc7f273b8e64c1c7e git
  • affected 4f7e7236435ca0abe005c674ebd6892c6e83aeb3 to before 43626dade36fa74d3329046f4ae2d7fdefe401c6 git
Other versions: unaffected
Linux Linux
  • affected 5.4.213 to before 5.4.215 semver
  • affected 5.10.143 to before 5.10.145 semver
  • affected 5.15.68 to before 5.15.70 semver
  • affected 5.19.9 to before 5.19.11 semver
Other versions: unaffected
Identifiers
CVE-2022-48671
CNA
Linux
Weakness (CWE)
CWE-667
Tags
Published
3 May 2024
Updated
11 May 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
5.5 Medium 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H ADP (CISA-ADP)
  • CISA KEV Not listed.
  • EPSS 0.0018, the 7th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 3 May 2024. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.